Python 3.7.14
Release Date: Sept. 6, 2022
Note: The release you are looking at is Python 3.7.14, a security bugfix release for the legacy 3.7 series which is now in the security fix phase of its life cycle. See the downloads page for currently supported versions of Python and for the most recent source-only security fix release for 3.7. The final bugfix release with binary installers for 3.7 was 3.7.9.
Please see the Full Changelog link for more information about the contents of this release and see What’s New In Python 3.7 for more information about 3.7 features.
Security content in this release
- CVE-2020-10735: converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity.
- gh-87389: http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //.
- gh-93065: Fix contextvars HAMT implementation to handle iteration over deep trees to avoid a potential crash of the interpreter.
- gh-80254: Raise ProgrammingError instead of segfaulting on recursive usage of cursors in sqlite3 converters.
More resources
- Online Documentation
- PEP 537, 3.7 Release Schedule
- Report bugs at https://github.com/python/cpython/issues.
- Help fund Python and its community.
Files
| Version | Operating System | Description | MD5 Sum | File Size | GPG | Sigstore | |
|---|---|---|---|---|---|---|---|
| Gzipped source tarball | Source release | dd65d6708e9c28a9e4fd2e986776ad14 | 24033206 | SIG | CRT | SIG | |
| XZ compressed source tarball | Source release | 0acdd6e1a95f49ee7f9b338fb6092b65 | 18121168 | SIG | CRT | SIG | |